CISA Advisory StopRansomware Gunra Ransomware

Gunra is a ransomwareasaservice RaaS used by affiliates to target government critical infrastructure and other organizations The Gunra ransomware variant first appeared in 2025 and expanded to RaaS operations in 2026 The actors leverage a doubleextortion model both encrypting data and threatening to publish exfiltrated data to a dedicated leak site DLS if the ransom Source